Slack
Bot User OAuth token for the Slack Web API.
Fields
| Field | Description | Required |
|---|---|---|
| Bot User OAuth Token | From your Slack app under OAuth & Permissions (starts with xoxb-). Install the app to your workspace first. | Yes |
| Signing Secret | From Basic Information → App Credentials. Required only for real-time Slack triggers (events) so we can verify inbound event signatures. | No |
Setup Steps
- Step 1: Go to api.slack.com/apps and create a new app (From scratch), then pick your workspace.
- Step 2: Under OAuth & Permissions → Scopes → Bot Token Scopes, add the scopes your workflow needs. Common ones:
chat:write,channels:read,channels:history,groups:history,reactions:write,users:read,users:read.email. - Step 3: Click Install to Workspace and approve. Copy the Bot User OAuth Token (starts with
xoxb-). - Step 4: In Falcon Builder, go to Dashboard → Credentials → Add Credential and pick Slack. Paste the bot token.
- Step 5: Click Test Connection. We call
auth.testand confirm the workspace and bot identity. - Step 6: Invite the app to any channel it should post to or read from (
/invite @YourAppin the channel). - Step 7 (real-time triggers only): Copy the Signing Secret from Basic Information → App Credentials into the credential's Signing Secret field. This lets Falcon Builder verify inbound Slack events.
Fast setup: app manifest
When creating the Slack app, choose From an app manifest and paste the YAML below. It pre-declares the bot scopes, event subscriptions, and the Request URL for real-time triggers in one step — then just install and copy the tokens.
display_information:
name: Falcon Builder
features:
bot_user:
display_name: Falcon Builder
oauth_config:
scopes:
bot:
- chat:write
- channels:read
- channels:history
- groups:history
- reactions:read
- reactions:write
- users:read
- users:read.email
- files:read
- app_mentions:read
settings:
event_subscriptions:
request_url: https://www.falconbuilder.dev/api/webhooks/slack/events
bot_events:
- message.channels
- app_mention
- reaction_added
- file_shared
- channel_created
- team_join
org_deploy_enabled: false
socket_mode_enabled: falseTrim the scopes and bot_events to only what your workflows use. After installing, the Request URL is verified automatically — Falcon Builder answers Slack's challenge.
Notes
- The bot can only act in channels it has been invited to.
- The Search message operation requires a user token (
xoxp-) rather than a bot token, because Slack only exposes search to user tokens.